From Active Directory Users and Computers, modify the properties of the Password Settings Container.

From Group Policy Management, create and link a Group Policy object (GPO) to the domain. Modify the password policy in the GPO. Filter the GPO to apply to G_Research only.

Answer: C

Question No: 82

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

Information and details provided in a question apply only to that question.

From Preferences in the User Configuration node of DomainPolicy, modify Windows Settings.

From Preferences in the Computer Configuration node of DomainPolicy, modify Windows Settings.

Answer: F

Question No: 83

You deploy a new enterprise certification authority (CA) named CA1. You plan to issue certificates based on the User certificate template.

You need to ensure that the issued certificates are valid for two years and support autoenrollment.

What should you do first?

Run the certutil.exe command and specify the resubmit parameter.

Duplicate the User certificate template.

Add a new certificate template for CA1 to issue.

Modify the Request Handling settings for the CA.

Answer: B

Question No: 84 HOTSPOT

You have a server named Server1 that runs Windows Server 2016. Server1 has the Web Application Proxy role service installed.

You publish an application named App1 by using the Web Application Proxy.

You need to change the URL that users use to connect to App1 when they work remotely.

Which command should you run? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

The Set-WebApplicationProxyApplication cmdlet modifies settings of a web application published through Web Application Proxy. Specify the web application to modify by using its ID. Note that the method of preauthentication cannot be changed. The cmdlet ensures that no other applications are already configured to use any specified ExternalURL or BackendServerURL.

Question No: 85 HOTSPOT

Your company has a testing environment that contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. Server1 has IP Address Management (IPAM) installed. IPAM has the following configuration.

The IPAM Overview page from Server Manager is shown in the IPAM Overview exhibit. (Click the Exhibit button.)

The group policy configurations are shown in the GPO exhibit. (Click the Exhibit button.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Answer:

Explanation:

No domains have been selected in the 鈥淐onfigure Server Discovery鈥?option. Therefore, no

automatic discovery will take place. Manual addition of a server will also fail because IPAM needs a domain configured for server verification.

Question No: 86

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

Information and details provided in a question apply only to that question.

You need to decrease the size of the Active Directory database on DC1.

Solution: You restart DC1 in Safe Mode. You run ntdsutil.exe, use the files option, and then restart DC1.

Does this meet the goal?

Yes

No

Answer: A

Question No: 88

A technician named Tech1 is assigned the task of joining the laptops to the domain. The computer accounts of each laptop must be in an organizational unit (OU) that is associated to the department of the user who will use that laptop. The laptop names must start with four characters indicating the department followed by a four-digit number

Tech1 is a member of the Domain Users group only. Tech1 has the administrator logon credentials for all the laptops.

You need Tech1 to join the laptops to the domain. The solution must ensure that the laptops are named correctly, and that the computer accounts of the laptops are in the correct OUs.

Solution: You script the creation of files for an offline domain join, and then you give the files to Tech1.

You instruct Tech1 to sign in to each laptop, and then to run djoin.exe. Does this meet the goal?

Yes

No

Answer: A

Question No: 89

A technician named Tech1 is assigned the task of joining the laptops to the domain. The computer accounts of each laptop must be in an organizational unit (OU) that is associated to the department of the user who will use that laptop. The laptop names must start with four characters indicating the department followed by a four-digit number

Tech1 is a member of the Domain Users group only. Tech1 has the administrator logon credentials for all the laptops.

You need Tech1 to join the laptops to the domain. The solution must ensure that the laptops are named correctly, and that the computer accounts of the laptops are in the correct OUs.

Solution: You instruct Tech1 to sign in to each laptop, to rename each laptop by using System in Control Panel, and then to join each laptop to the domain by using the Netdom join command.